b2net

Privacy certificate issue starting 5/14/23.

I eventually entered the site anyway so I could post about it here. Been getting a warning from Google that there is a security issue on all of DVD Talk. Not just the forums. I sent a note to Internet Brands. Here's to hoping it can be fixed soon and is not foreshadowing of this site's future.

Yes I've tried other browsers on other devices. Some trigger same while others don't. I hope it is still worth IB checking on the sites certificates.

IBJoel

IBJoel

I've made a tech ticket for this, thank you

IBJoel

The site's certificate was renewed yesterday, so may have had some downtime. It shouldn't be an issue anymore. If it is for you, you may need to clear your cache.

b2net

Cleared everything and still getting the errors. Wonder if this is happening to others and why forum traffic seems down since Sunday.

TomOpus

I've never got it.

Toddarino

I haven’t either. I use safari.

b2net

Chrome on Android 9.


I also took screenshots of the certificate but didn't want to post publicly.

Yes I completely cleared browser cache and history.

TheBang

*.dvdtalk.com is using a certificate now that chains back to GTS (Google Trust Services) Root R4. This root did not exist until 2017 (and new certificates like DVDTalk's are no longer cross-signed), so if you have an older system that hasn't received updates in a while, GTS Root R4 will not be included in your trust store, and as such, your browser will not be able to build a chain of trust for the secure connections.

These are the minimum versions you need to ensure support for GTS Root R4:

Android 10
iOS 12.1.3
macOS 10.14.3
Windows 10 1803 (or earlier versions of Win 7/8/10 with Sept 2017 (or later) root certificate update installed)
Firefox 65
Chrome 105 (earlier versions rely on the OS root store, so refer to your OS version if using an older Chrome)

Spiderbite

I have gotten this message for what feels like years anytime I try to access the forums:

b2net

So for those of us on hardware that won't ever be upgraded to newer OS, we "risk" it to visit here (not really a risk yet have the warning), buy new hardware, or don't visit any longer. I choose to stay.

While I realize that hardware + OS can become obsolete at some time and this isn't IB issue, I suspect there may be some members that have stopped visiting due the big popup warning ⚠️.

Spiderbite

I would definitely agree with that. As it probably also keeps away potential new members.

The weird thing is all my stuff is relatively new. I am not accessing this on a really old computer or non-updated browser.

TheBang

Spiderbite, your problem is a little different, and is due to an insecure form submission on a secure page. Specifically, I think you're clicking on this drop-down menu (or "Forum Home" link) on the front page, right?



This problem is due to incorrect HTML code on the page. Specifically, the two instances of http://forum.dvdtalk.com in the code here both need to be changed to https (or, at least protocol-relative, like some other links on the page):



I'm pretty sure this issue has been pointed out before. It's a very simple code change. Paging IBJoel

In the meantime, you can avoid this warning issue by clicking the "Forum" link at the top-middle of the page, of simply going directly to "forum.dvdtalk.com" instead of "dvdtalk.com". Man, IB should be paying me for debugging their site.

TheBang

You can manually add the GTS Root R4 into your device's trusted root store, and that should make it so you no longer get the warnings.

I don't have Android, but I think you can install it by simply downloading it from here, and when you open it, it should prompt you to install it:

https://pki.goog/repo/certs/gtsr4.pem

If that doesn't work, then some other things I read to try were to download it on your computer and then send it to your phone by email (and then save the attachment to your phone's storage) or transfer it via USB file transfer, and then use these steps to "Install a certificate":

https://support.google.com/pixelphon.../2844832?hl=en

Or, installing the certificate from storage on your phone might be in one of these locations:

Settings > Security & Screen Lock > Install from storage
Settings > Biometrics and Security > Other Security Settings > Install from device storage
Settings > Security > Encryption & Credentials > Install from storage

If it asks you what type of certificate to install, choose "CA certificate"

Spiderbite

You are 100% correct TheBang!

TomOpus

I hereby grant you free membership on the forum. Enjoy!